Method and apparatus for providing session key for WUSB security and method and apparatus for obtaining the session key

• US 20070157020A1
• Filed: 01/03/2007
• Published: 07/05/2007
• Est. Priority Date: 01/03/2006
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Sung-min, Oh, Seung-Jae
• Granted Patent: US 8,924,710 B2
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A wireless universal serial bus (WUSB) security is provided. A method of providing a session key to be used during a session between a host and a device creates the session key based on a seed key stored in a region that is not allowed by the device; and provides the session key to the device. Therefore, a user does not need to distribute information necessary for creating the session key(i.e., a connection context) to a guest device.

Claims

1. A method of providing a session key to be used during a session between a host and a device, the method comprising:

(a) creating the session key based on a seed key stored in a region that is not allowed by the device; and

(b) providing the session key to the device.

2. The method of claim 1, wherein the region that is not allowed by the device is a security memory installed in an apparatus that uses the method.

3. The method of claim 1, further comprising:

providing a host ID of the host to the device; and

obtaining information necessary for creating the session key provided by the host having the host ID from the device,

wherein operation (a) creates the session key based on the information and the CK.

4. The method of claim 1, further comprising:

detecting the device and providing a specific device ID to the device; and

receiving a request for the session key from the device that received the specific device ID,

wherein operation (a) creates the session key after receiving the request.

5. The method of claim 1, further comprising:

(c) receiving a first random number corresponding to the host from the device; and

(d) generating a second random number corresponding to the device,

wherein operation (a) creates the session key based on the first and second random numbers.

6. The method of claim 5, wherein operation (b) transmits the second random number and the session key to the device.

7. The method of claim 1, wherein the host and the device are based on wireless universal serial bus (WUSB) standards.

8. An apparatus for providing a session key to be used during a session between a host and a device, the method comprising:

a session key creator which creates the session key based on a seed key stored in a region that is not allowed by the device; and

a session key provider which provides the session key to the device.

9. A computer-readable storage medium having embodied thereon a computer program for executing a method of providing a session key to be used during a session between a host and a device, the method comprising:

(a) creating the session key based on a seed key stored in a region that is not allowed by the device; and

(b) providing the session key to the device.

10. A method of obtaining a session key corresponding to a session between a host and a device, the method comprising:

(a) obtaining first information required to create the session key from the host;

(b) providing the first information to an apparatus for creating the session key to request the session key; and

(c) obtaining the session key as a response to the request.

11. The method of claim 10, further comprising:

(d) obtaining a host ID of the host from the apparatus for creating the session key,

wherein operation (a) obtains the first information required to create the session key from the host having the host ID.

12. The method of claim 10, further comprising:

(d) obtaining a device ID from the host; and

(e) providing the device ID to the host to request for a connection with the host,

wherein operation (a) obtains the first information from the host connected according to the request for the connection.

13. The method of claim 10, further comprising:

(d) obtaining a device ID from the apparatus for creating the session key; and

(e) providing the device ID to the host to request for a connection with the host,

wherein operation (a) obtains the first information from the host according to the request for the connection.

14. The method of claim 10, wherein the first information is a random number corresponding to the host.

15. The method of claim 10, wherein operation (c) obtains the session key and second information required to create the session key as a response to the request,

further comprising:

(d) providing the second information to the host.

16. The method of claim 15, wherein the second information is a random number corresponding to the device.

17. The method of claim 10, wherein the host and the device are based on WUSB standards.

18. An apparatus for obtaining a session key corresponding to a session between a host and a device, the apparatus comprising:

an information obtainer which obtains information required to create the session key from the host;

a session key requester which provides the information to an apparatus for creating the session key to request the session key; and

a session key obtainer which obtains the session key as a response to the request.

19. A computer-readable storage medium having embodied thereon a computer program for executing a method of obtaining a session key corresponding to a session between a host and a device, the method comprising:

(a) obtaining first information required to create the session key from the host;

(b) providing the first information to an apparatus for creating the session key to request the session key; and

(c) obtaining the session key as a response to the request.